Cybersecurity-Projects - Building 70 Projects ranging from beginner to adva

项目说明

<di="center">
<img width="260" height="260" alt="Kali-dragon-icon svg" src=" alt="Kali Linux Icon"/>
<h1 align="center">Cybersecurity Projects 🐉</h1>
<p align="center">70 Cybersecurity Projects, Certification Roadmaps & Resources</p>
</div>

<di="center">
<img src=" alt="stars"/>
<img src=" alt="forks"/>
<img src=" alt="issues"/>
<img src=" alt="license"/>
<br/>
<img src=" alt="projects"/>
<img src=" alt="resources"/>
</div>

<di="center">
<a href="
<img src=" alt="contribute"/>
</a>
</div>

<br/>
<p align="center"><a href=" src="./.github/assets/instagram-handle.svg" width="155" height="45" alt=".dev on Instagram"/></a></p>

<h2 align="center"><strong>View Complete Projects:</strong></h2>
<di="center">
<a href="
<img src=" alt="Projects"/>
</a>
</div>

<p align="center">_{<em>Currently building: DDoS Mitigation 工具</em>}</p>

---

Quick Na

Projects

Hands-on cybersecurity projects with full 源码 代码, organized in four tiers — Foundations (pre-beginner, first-time programmers), Beginner, Intermediate, and Ad.

Certification Roadmaps

10 structured career paths with certification guides for SOC Analyst, Pentester, Security Engineer, and more.

Learning Resources

Tools, courses, certifications, communities, and frameworks for cybersecurity professionals.

---

Projects

<di="center">
<img src=" alt="Foundations"/>
<img src=" alt="Beginner"/>
<img src=" alt="Intermediate"/>
<img src=" alt="Ad"/>
</div>

---

> [!TIP]
> Want to be walked through building these instead of reading finished 源码? CertGames has guided project courses that build real security tools from scratch, step by step, with the concepts explained as you go. Same projects, less getting stuck. FREE

Foundations Projects

> [!NOTE]
> Start here if this is your first time coding. The Foundations tier is *pre-beginner* — built for someone who has ne Python, has barely used a terminal, and is new to cybersecurity. 源码 files are heavily commented as a teaching aid, and every learn/ folder explains concepts from zero. Once you're comfortable here, the Beginner projects assume you already know the language and mo.
>
> What makes Foundations different:
> - Single-file projects — the entire 工具 lives in one readable Python file. No file-hopping.
> - Hea comments — every line that introduces a new concept is annotated inline.
> - Numpy-style docstrings on every function — what it does, why it exists, every parameter.
> - Extra-deep learn/ folders — Python features and security concepts both explained from zero.
> - Senior-level code, beginner-le — the 代码 itself is still production-quality.

| Project | Info | What You'll Learn |
|---------|------|-------------------|
| Hash Identifier<br>Identify hash types by prefix, length, and charset | !Step 1/3 !2-4h !Python !Foundations | Hash families (MD5, SHA, bcrypt, Argon2) • PHC string format • Pattern matching • Pure-function design<br>源码 代码 \| Docs |
| HTTP Headers Scanner<br>Audit a URL's response headers for missing or weak security controls | !Step 2/3 !3-5h !Python !Foundations | HTTP fundamentals • Security headers (CSP, HSTS, X-Frame-Options) • httpx requests • Scored audits<br>Source Code \| Docs |
| Password Manager<br>Encrypted local vault with master password unlock | !Step 3/3 !6-8h !Python !Foundations | Argon2id key deri • AES-GCM authenticated encryption • Secure on-disk • Master-password workflows<br>源码 代码 \| Docs |

---

Beginner Projects

| Project | Info | What You'll Learn |
|---------|------|-------------------|
| Simple Port Scanner<br>Async TCP port scanner in C++ | !2-4h !C++ !Beginner | TCP socket programming • Async I/O patterns • Service detection<br>Source Code \| Docs |
| Keylogger<br>Capture keyboard events with timestamps | !1-2h !Python !Beginner | Event handling • File I/O • Ethical considerations<br>源码 代码 \| Docs |
| Caesar Cipher<br>CLI encryption/decryption 工具 | !1-2h !Python !Beginner | Classical cryptography • Brute force attacks • CLI design<br>Source Code \| Docs |
| DNS Lookup CLI Tool<br>Query DNS records with WHOIS | !2-3h !Python !Beginner | DNS protocols • WHOIS queries • Reverse DNS lookup<br>源码 代码 \| Docs |
| Simple Scanner<br>Check software against C | !3-4h !Go !Beginner | C • Dependency scanning • assessment<br>Source Code \| Docs |
| Network Traffic Analyzer<br>Capture and analyze packets | !3-5h !Python !C++ !Beginner | Packet capture • Protocol analysis • Traffic <br>Source (C++) \| Docs (C++) \| Source (Python) \| Docs (Python) |
| Hash Cracker<br>Dictionary and brute-force cracking | !3-4h !C++ !Beginner | Hash algorithms • Dictionary attacks • Password security<br>Source Code \| Docs |
| Steganography Multi-Tool<br>Hide data in images, audio, QR, PDFs, text | !8-10h !Go !Beginner | Multi-format steganography • Encrypted AEAD en • Zero-width Unicode • Audio LSB • QR Reed-Solomon injection<br>源码 代码 \| Docs |
| Deserialization Gadget Lab<br>Read untrusted Marshal and YAML without e it, then break it | !12-16h !Ruby !Docker !Beginner | Gadget chains • Marshal binary format • Gated dispatch • TracePoint veto • C<br>Source Code \| Docs<br>![gem: marshalsea]() |
| Canary Token Generator<br>Self-hosted honeytokens that alert on access | !2-3h !Go !React !Docker !Beginner | Deception defense • Honeytokens • MySQL wire protocol • PDF/DOCX patching • Webhook + Source Code \| Docs<br>![iglowinthedark.com]() |
| Phishing Domain Generator & Quishing Scanner<br>Typosquat generation + QR phishing detection | !2-3h !Python !Beginner | Homoglyph attacks • Typosquatting • QR code analysis • Domain intelligence<br>Learn More |
| SSH Brute Force Detector<br>Monitor and block SSH attacks | !2-4h !Python !Beginner | Log parsing • Attack detection • Firewall automation<br>Learn More |
| Simple C2 Beacon<br>Command and Control beacon/服务端 | !3-5h !Python !React !Docker !Beginner | C2 architecture • MITRE ATT&CK • WebSocket protocol • XOR encoding<br>Source Code \| Docs |
| Base64 Encoder/Decoder<br>Multi-format encoding tool | !1h !Python !Beginner | Base64/32 encoding • URL encoding • Auto-detection<br>Source Code \| Docs |
| Linux CIS Hardening Auditor<br>CIS benchmark compliance checker | !3-4h !Bash !Beginner | CIS benchmarks • System hardening • Compliance scoring • Shell scripting<br>Source Code \| Docs |
| Systemd Persistence Scanner<br>Hunt Linux persistence mechanisms | !2-3h !Go !Beginner | Persistence techniques • Systemd internals • Cron analysis • Threat hunting<br>Source Code \| Docs |
| Linux eBPF Security Tracer<br>Real-time syscall tracing with eBPF | !2-3h !Python !C !Beginner | eBPF programs • Syscall tracing • BCC framework • Security obser<br>Source Code \| Docs |
| Trojan Application Builder<br>Educational malware lifecycle demo | !2-3h !Python !Beginner | Trojan anatomy • Data exfiltration • File encryption • Attack lifecycle<br>Learn More |
| DNS Sinkhole<br>Pi-hole-style malware domain blocker | !3-4h !Go !Beginner | DNS protocol • Blocklist management • Query logging • Network defense<br>Learn More |
| Firewall Rule Engine<br>Parse and iptables/nftables rules | !2-3h !V !Beginner | Firewall internals • Rule parsing • iptables/nftables • <br>Source Code \| Docs |
| LLM Prompt Injection Firewall<br>Sandbox the effects, not the prompt: fence untrusted text, authorize the 工具 calls, match the secret on the way out | !14-18h !Python !Docker !Beginner | Pro fencing • Taint propagation • Unicode tag-block smuggling • Encoding closure • OWASP LLM01:2025<br>Source Code \| Docs<br>![Website Demo]() |

Intermediate Projects

| Project | Info | What You'll Learn |
|---------|------|-------------------|
| Security News Scraper<br>Aggregate cybersecurity news | !3-4h !Go !Beginner | Web scraping • C • Database storage<br>Source Code \| Docs |
| Payload Obfuscation Engine<br>Multi-layer payload obfuscation toolkit | !2-4d !Go !Intermediate | Obfuscation techniques • Polymorphism • A • Signature detection<br>Learn More |
| SIEM Dashboard<br>Log aggregation with correlation | !3-5d !Flask !React !Intermediate | SIEM concepts • Log correlation • Full-stack de<br>Source Code \| Docs<br>![siem.carterperez-dev.com]() |
| Token Abuse Playground<br>15+ token to exploit and fix | !3-5d !FastAPI !React !Intermediate | JWT exploitation • OAuth attacks • Session security • Token forensics<br>Learn More |
| Supply Chain Attack Simulator<br>Fake PyPI package dependency confusion demo | !2-4d !Python !Intermediate | Supply chain attacks • Dependency confusion • Package security • PyPI internals<br>Learn More |
| DDoS Mitigation Tool<br>Detect traffic spikes | !2-4d !Go !Intermediate | DDoS detection • Rate limiting • Anomaly detection<br>Learn More |
| Secrets Scanner<br>Scan codebases and git history for leaked secrets | !1-2d !Go !Intermediate | Secret detection • Shannon entropy • HIBP k-anonymity • SARIF output<br>Source Code \| Docs |
| API Security Scanner<br>Enterprise API scanner | !3-5d !FastAPI !React !Docker !Intermediate | OWASP API Top 10 • ML fuzzing • GraphQL/SOAP testing<br>源码 代码 \| Docs |
| Wireless Deauth Detector<br>Monitor WiFi deauth attacks | !2-4d !Rust !Intermediate | Wireless security • Packet sniffing • Attack detection<br>Learn More |
| Credential Enumeration<br>Post-exploitation credential collection | !2-4d !Nim !Intermediate | Credential extraction • Browser forensics • Red team tooling • Nim language<br>Source Code \| Docs |
| Binary Analysis Tool<br>Disassemble and analyze executables | !3-5d !Rust !Intermediate | Binary analysis • String extraction • Malware detection<br>Source Code \| Docs<br>![]() |
| Chaos Engineering Security Tool<br>Inject security failures to test resilience | !3-5d !Go !Intermediate | Chaos engineering • Security resilience • Credential spraying • Auth testing<br>Learn More |
| Credential Rotation Enforcer<br>Track and enforce credential rotation policies | !2-4d !Crystal !Intermediate | Credential hygiene • Secret rotation • Compliance dashboards • API integration<br>Source Code \| Docs |
| Race Condition Exploiter<br>TOCTOU race condition attack & defense lab | !3-5d !FastAPI !React !Intermediate | TOCTOU attacks • Double-spend bugs • Concurrent exploitation • Race <br>Learn More |
| JA3/JA4 TLS Fingerprinting Tool<br>Fingerprint TLS clients by handshake | !2-4d !Rust !Intermediate | TLS handshake analysis • JA3/JA4 hashing • Bot detection • Malware C2 identification<br>源码 代码 \| Docs<br>![mkultraalumni.com]() |
| Mobile App Security Analyzer<br>Decompile and analyze mobile apps | !3-5d !Python !Intermediate | APK/IPA analysis • Reverse engineering • OWASP Mobile<br>Learn More |
| DLP Scanner<br>Data Loss Pre for files, DBs, and traffic | !2-4d !Python !Intermediate | PII detection • GDPR/HIPAA compliance • Pattern matching • Data classification<br>源码 代码 \| Docs |
| Lua/Nginx Edge Backend<br>Full CRUD backend via Lua in Nginx | !3-5d !Lua !Nginx !Intermediate | Edge computing • OpenResty • Lua scripting • WAF • JWT at the edge<br>Learn More |
| Privesc Playground<br>20+ pri escalation paths to exploit | !3-5d !Python !Intermediate | SUID exploitation • Sudo abuse • Cron hijacking • GTFOBins • Capability abuse<br>Learn More |
| SBOM Generator & Matcher<br>Software Bill of Materials with C | !2-4d !Go !Intermediate | SPDX/CycloneDX formats • Dependency analysis • C • EO 14028 compliance<br>源码 代码 \| Docs |
| Subdomain Takeo<br>Detect dangling DNS records | !2-4d !Go !Intermediate | DNS enumeration • CNAME analysis • Cloud resource claiming • Bug bounty<br>Learn More |
| GraphQL Security Tester<br>Automated GraphQL testing | !2-4d !Python !Intermediate | Introspection attacks • Query depth DoS • Authorization bypass • Batching abuse<br>Learn More |
| Docker Security Audit<br>CIS Docker Benchmark scanner | !1-2d !Go !Docker !Intermediate | CIS benchmarks • Container security • Multiple output formats<br>源码 代码 \| Docs |

Ad Projects

| Project | Info | What You'll Learn |
|---------|------|-------------------|
| API Rate Limiter<br>Distributed rate limiting middleware | !1w !Python !Redis !Ad | Token bucket algorithm • Distributed systems • Redis backend<br>Source Code \| Docs |
| Encrypted Chat Application<br>Real-time E2EE messaging | !1-2w !FastAPI !SolidJS !PostgreSQL !Ad | Signal Protocol • Double Ratchet • WebAuthn • WebSockets<br>Source Code \| Docs |
| Exploit De Framework<br>Modular exploitation 框架 | !3-4w !C++ !Ad | Exploit de • Payload generation • Plugin architecture<br>Learn More |
| AI Threat Detection<br>ML-powered nginx threat detection | !3-4w !FastAPI !React !PyTorch !Ad | ML ensemble (AE + RF + IF) • ONNX inference • Real-time detection<br>源码 代码 \| Docs |
| Zingela Stateless Scanner<br>Line-rate stateless mass TCP/UDP port scanner | !1-2w !Zig !Ad | Stateless SYN scanning • SipHash cookies • Cyclic-group permutation • AF_PACKET / AF_XDP<br>Source Code \| Docs |
| Bug Bounty Platform<br>Full disclosure platform | !2-3w !FastAPI !React !PostgreSQL !Ad | Full-stack de • C • Workflow automation<br>源码 代码 \| Docs<br>![bugbounty.carterperez-dev.com]() |
| Cloud Security Compliance Dashboard<br>Multi-cloud compliance with CIS, SOC2, HIPAA | !2-3w !Go !React !AWS !Ad | CIS benchmarks • SOC2/HIPAA compliance • Cost-security optimization • Drift detection<br>Learn More |
| Malware Analysis Platform<br>Automated sandbox analysis | !2-3w !Rust !Docker !Ad | Malware analysis • Sandboxing • YARA rules • IOC extraction<br>Learn More |
| Quantum Resistant Encryption<br>Post-quantum cryptography | !3-4w !Python !Ad | Post-quantum algorithms • Hybrid encryption • Kyber/Dilithium<br>Learn More |
| Zero Day Scanner<br>Co fuzzing | !2-3w !Rust !C !Ad | Keyless harness synthesis • Auto-build under ASAN • AFL++ campaigns • Stack-hash dedup • Magma- triage • Disclosure bundles<br>源码 代码 \| Docs |
| Distributed Password Cracker<br>GPU-accelerated cracking | !3-4w !C++ !CUDA !Ad | Distributed systems • GPU computing • Hash cracking<br>Learn More |
| Kernel Rootkit Detection<br>Detect kernel-le | !2-3w !Rust !Ad | Kernel internals • Memory forensics • Rootkit detection<br>Learn More |
| Blockchain Smart Contract Auditor<br>Solidity analysis | !3-4w !Python !Solidity !Ad | Smart contracts • Static analysis • Solidity security<br>Learn More |
| Ad ML Attacker<br>Generate ad examples | !3-4w !Python !TensorFlow !Ad | Ad ML • FGSM/DeepFool • Model robustness<br>Learn More |
| Re<br>Re learning platform. | !3-4w !C !Ad | Reverse Engineering • Disassembly • Dynamic & Static Analysis<br>源码 代码 \| Docs
| Hardware Security Module Emulator<br>Software HSM that compiles to a real PKCS#11 .so | !2-3w !Zig !Ad | PKCS#11/Cryptoki C ABI (machine-checked headers) • AES-GCM/CBC • RSA/ECDSA/ECDH • Argon2id + encrypted-at-rest • driven by pkcs11-tool<br>Source Code \| Docs |
| Network Covert Channel<br>Data exfiltration techniques | !3-4w !Rust !Ad | Covert channels • Data exfiltration • Steganography<br>Learn More |
| Automated Penetration Testing<br>Full pentest automation | !3-4w !Python !Ad | Pentest automation • Recon to exploitation • Report generation<br>Learn More |
| Haskell Reverse Proxy<br>Functional reverse proxy with security middleware | !2-3w !Haskell !Ad | Functional programming • Reverse proxy design • Security middleware • Haskell<br>Source Code |
| "Monitor the Situation" Dashboard<br>Real-time cyber threat situational awareness | !3-4w !Go !React !PostgreSQL !Ad | Threat intel feeds • EPSS/KEV/C • BGP hijacks • WebSocket fan-out • 3D globe SOC view<br>Source Code \| Docs<br>![iminthewalls.com]() |
| Honeypot Network<br>Multi-service honeypot deployment & analysis | !2-3w !Go !React !Docker !Ad | Honeypot deployment • Attacker behavior analysis • IOC extraction • MITRE mapping<br>Source Code \| Docs<br>![honeypot-网络.carterperez-dev.com]() |
| Supply Chain Security Analyzer<br>Dependency analysis | !2-3w !Go !Ad | Supply chain security • Dependency analysis • Malicious packages<br>Learn More |

---

Learn More

Certification Roadmaps - Career paths for SOC Analyst, Pentester, Security Engineer, GRC Analyst, and 6 more tracks

Learning Resources - Tools, courses, certifications, YouTube channels, Reddit communities, and security frameworks

CertGames - The platform I built to do all of this in one place: practice questions, Learn lessons, guided projects, and these roadmaps with progress tracking. FREE

License

AGPL 3.0.

项目信息

开发语言：Go

Star 数：7866

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified Cybersecurity learning 👇展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。